🟢 Low ⏱ 5–15 min Last verified: 15 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1285 CVE-2026-40021 Upstream summary: Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-58367 CVE-2026-33155 Upstream summary: DeepDiff is a project focused on Deep Difference and search of any Python data. Versions 5.0.0 through 8.6.0 are vulnerable to class pollution via […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7256 CVE-2024-8006 CVE-2025-11961 Upstream summary: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-25063 Upstream summary: gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4063 Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2023-39417 CVE-2023-39418 CVE-2023-5868 CVE-2023-5869 +5 more Upstream summary: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing […]
🟡 Medium ⏱ 5–30 min Last verified: 15 June 2026 Affected versions: Ubuntu 26.04 LTS Ubuntu 26.04 Ubuntu 26.04.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:18913 Related CVEs: CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2026-25679 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-21619 Upstream summary: Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Object Injection, Excessive […]
🟡 Medium ⏱ 10–30 min Last verified: 15 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3446 CVE-2021-3505 CVE-2021-3569 CVE-2021-3623 CVE-2021-3746 CVE-2023-1017 CVE-2023-1018 CVE-2025-49133 Upstream summary: A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL […]
🟡 Medium ⏱ 10–30 min Last verified: 15 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7992-1 Related CVEs: CVE-2026-24061 CVE-2022-39028 CVE-2023-40303 Upstream summary: Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled certain environment variables. A remote attacker could use this issue to bypass authentication […]
